Bitcoin is a digital currency that runs without any bank, government, or central authority. Instead of relying on a trusted institution to keep track of who owns what, it uses a shared public ledger called a blockchain, secured by cryptography and maintained by thousands of computers around the world. Every transaction ever made is recorded on this ledger, and anyone can verify it. The system is clever enough that it has operated continuously since January 2009 without a single entity in charge, yet the mechanics underneath are more layered than most people realize.
The Blockchain as a Shared Ledger
Think of the blockchain as a giant spreadsheet that every participant can read but no single person controls. Transactions are grouped into blocks, and each block is cryptographically linked to the one before it, forming a chain. That chain stretches all the way back to the very first block, called the genesis block. Because every block references the one before it through a unique fingerprint called a hash, tampering with an old entry would break the chain from that point forward, making fraud obvious to the entire network. Cryptographic techniques run through every layer of the system, from how data is stored to how the network reaches agreement on which transactions are valid.1IOP Publishing (Journal of Physics: Conference Series). Research on the Application of Cryptography on the Blockchain
Each block has a limited amount of space. Bitcoin’s original design capped block data at 1 megabyte, which limits how many transactions can be processed at once. This constraint is fundamental to understanding both the system’s security and its performance bottlenecks, which come up later when we talk about scalability.
Keys, Addresses, and Owning Bitcoin
You do not “own” a bitcoin the way you own a coin in your pocket. What you actually hold is a private key, which is essentially a very large secret number. That private key generates a corresponding public key through a one-way mathematical process based on elliptic curve cryptography. Your Bitcoin address, the string of characters you share with someone who wants to pay you, is derived from that public key. The private key lets you sign transactions to spend bitcoin, while the public key and address let others verify those transactions and send funds to you.2Indian Journal of Cryptography and Network Security. Security of the Secp256k1 Elliptic Curve used in the Bitcoin Blockchain
The critical thing to understand is that this relationship only works in one direction. Anyone can derive your public key from your address, but nobody can reverse-engineer your private key from your public key. Lose your private key and your bitcoin is gone forever. There is no “forgot my password” option, no customer support line. This is the tradeoff at the heart of Bitcoin: you get total control, but total responsibility too.
Bitcoin uses a specific elliptic curve called secp256k1 for this key generation. The security of the entire system rests on the mathematical difficulty of reversing that curve’s operations. As long as that problem remains computationally infeasible for classical computers, the ownership model holds.
How Transactions Actually Move Through the Network
When you send bitcoin, your wallet software creates a transaction message that says, roughly, “I’m transferring X amount from this address to that address,” and signs it with your private key. That signed transaction gets broadcast to the peer-to-peer network, where thousands of nodes (computers running the Bitcoin software) receive it, check that the signature is valid and that you actually have the funds, and pass it along to their neighbors.
Valid transactions that have not yet been included in a block sit in a waiting area called the mempool. Every node maintains its own version of the mempool. When a new block is created by a miner, it scoops up a batch of transactions from the mempool and commits them permanently to the blockchain. Transactions that pay higher fees tend to get picked up faster, because miners are economically motivated to maximize the fees they collect.
Congestion is the primary driver of how long you wait for a transaction to confirm and how much you pay in fees. Research modeling the mempool as a market for scarce block space found that congestion conditions are the main determinant of confirmation delay, and that the marginal value of jumping ahead in the fee queue is priced into what users pay.3arXiv. A Model and Estimation of the Bitcoin Transaction Fee During calm periods, a transaction might confirm in the next block for a few cents. During a frenzy, fees can spike to tens of dollars.
Mining and Proof of Work
Mining is the process that adds new blocks to the blockchain and, in doing so, creates new bitcoin. Miners compete to solve a computational puzzle: they take the data in a candidate block, add a random number called a nonce, and run it through a hash function. If the resulting hash meets a difficulty target set by the network, the miner wins the right to publish that block and collect a reward. The puzzle has no shortcut; miners simply try trillions of guesses until one works.
This mechanism, called proof of work, serves two purposes. First, it makes it extremely expensive to cheat. An attacker who wanted to rewrite the blockchain would need to redo all that computational work faster than the rest of the network combined. Second, it provides a fair way to distribute new coins. Every roughly ten minutes, one miner finds a valid block and earns the block reward, currently 3.125 bitcoin (it halves approximately every four years).
The mining industry has undergone a dramatic hardware evolution. Early participants used ordinary desktop computers, but miners quickly moved to specialized hardware offering far higher hash rates at lower energy costs.4Elsevier / ScienceDirect. Sustainability of bitcoin and blockchains Today, mining is dominated by application-specific integrated circuits (ASICs), machines built to do nothing except compute Bitcoin hashes. A single modern ASIC can perform hundreds of trillions of hashes per second, which makes mining with a regular laptop as competitive as entering a Formula 1 race on a bicycle.
The Halving and the Future of Block Rewards
Bitcoin’s supply is hard-capped at 21 million coins. The block reward started at 50 bitcoin in 2009 and halves roughly every 210,000 blocks, or about every four years. As of 2024, the reward stands at 3.125 bitcoin per block. Eventually, the reward will shrink to effectively zero, and miners will rely entirely on transaction fees for income.
This transition is not just a trivia point. Research into what happens when block rewards disappear suggests that the incentive structure changes in subtle and potentially destabilizing ways. Even a small fraction of revenue coming from transaction fees, rather than fixed block rewards, can create scenarios where miners are tempted to deviate from honest behavior.5arXiv. Bitcoin After Block Rewards Whether the fee market will be robust enough to keep the network secure in a post-reward world is one of the open questions in Bitcoin research.
Block Propagation and Why Speed Matters
Once a miner finds a valid block, it needs to reach the rest of the network as quickly as possible. Slow propagation creates problems: if two miners find valid blocks at nearly the same time but one block spreads faster, the slower block gets orphaned, wasting the miner’s effort and temporarily creating conflicting versions of the ledger.
Bitcoin’s networking protocol is a key bottleneck for throughput. Despite strong protections for security and privacy, the current protocol supports only a low number of transactions per second. Researchers have explored redesigned block propagation methods, improving the compact-block relaying protocol so that blocks containing large numbers of transactions can spread through the network without extra delay.6Computer Networks. Speeding up block propagation in Bitcoin network: Uncoded and coded designs These are engineering optimizations that could increase throughput without touching the consensus rules themselves.
How Bitcoin Compares on Speed
Bitcoin processes roughly five to seven transactions per second. For comparison, traditional payment networks handle orders of magnitude more.7Elsevier / ScienceDirect. Speeding up block propagation in Bitcoin network: Uncoded and coded designs That gap is the single biggest practical limitation of using Bitcoin for everyday payments. Buying a coffee with Bitcoin on the base layer is technically possible but slow and, during busy periods, expensive.
This is by design, not oversight. Bitcoin’s creators chose security and decentralization over raw speed. Every full node verifies every transaction independently, which is the source of Bitcoin’s trustless nature but also the reason it cannot simply scale up the way a centralized database can. The tension between decentralization and performance has shaped the system’s evolution ever since.
Segregated Witness, Taproot, and Other Upgrades
Bitcoin is not frozen in time. It evolves through carefully negotiated software upgrades, though the process is deliberately slow and conservative. Two of the most significant upgrades in recent years are Segregated Witness (SegWit) and Taproot.
SegWit, activated in August 2017, changed how transaction data is stored. It separated witness data (signatures and scripts used to unlock outputs) from the main transaction data like inputs, outputs, and amounts. Because the witness data is stored separately, it no longer counts against the original 1 MB block size limit. This lets more transactions fit into each block without formally increasing the block size.8Blockchain: Research and Applications. Programming on Bitcoin: A Survey of Layer 1 and Layer 2 Technologies in Bitcoin Ecosystem SegWit also introduced a new metric called block weight, with a maximum of 4 MB when combining witness and non-witness data, though the non-witness portion remains capped at 1 MB.9Blockchain: Research and Applications. Bitcoin reimagined: A comprehensive study of ordinals and inscriptions protocols for Web3 asset innovation
Taproot, activated in November 2021, brought Schnorr signatures to Bitcoin. These allow multiple public keys to be aggregated into a single key, which means a complex multi-signature transaction can look identical to a simple single-signature one on the blockchain.10Blockchain: Research and Applications. Programming on Bitcoin: A Survey of Layer 1 and Layer 2 Technologies in Bitcoin Ecosystem That is a meaningful privacy improvement: observers cannot tell whether a transaction involved one person or a dozen. Taproot also reduces the data size of certain transaction types and enables batch verification of signatures, improving scalability for complex transactions.11Blockchain: Research and Applications. Bitcoin reimagined: A comprehensive study of ordinals and inscriptions protocols for Web3 asset innovation
The Lightning Network and Layer 2 Solutions
If the base blockchain is too slow for everyday payments, one solution is to handle most transactions off-chain and only settle the final result on-chain. That is the idea behind the Lightning Network, Bitcoin’s most prominent “layer 2” system.
Two people open a payment channel by locking some bitcoin into a shared on-chain transaction. They can then send payments back and forth between each other instantly and for near-zero fees, updating a private balance sheet between themselves. When they are done, they close the channel with a single on-chain transaction that reflects the final balance. Because the intermediate payments never touch the blockchain, the network is not burdened by them.
These channels can be linked together, so if you have a channel open with Alice and Alice has one open with Bob, you can pay Bob through Alice without needing a direct channel. Research continues on improving payment channel designs, with newer constructions offering simpler architectures, lower storage requirements, and better compatibility with network routing.12arXiv. OTS-PC: OTS-based Payment Channels for the Lightning Network
The Lightning Network is not a perfect solution. It requires users to be online to receive payments, channel capacity is limited by the bitcoin locked in them, and routing payments through many hops can fail if any link in the chain lacks liquidity. But for small, frequent transactions, it makes Bitcoin far more practical than the base layer alone.
The Energy Question
Proof of work consumes enormous amounts of electricity, and Bitcoin’s environmental impact is one of the most contentious aspects of the system. The numbers are large and have grown over time. One estimate placed the network’s annual power consumption at about 45.8 TWh as of late 2018, with resulting carbon emissions comparable to those of a mid-sized country.13Joule. The Carbon Footprint of Bitcoin
By 2021, the picture had grown considerably. One study estimated the network’s electric load demand at about 13.39 gigawatts, producing an estimated 65.4 megatonnes of CO₂ per year, comparable to the total emissions of Greece and representing roughly 0.19% of global emissions.14Joule. Revisiting Bitcoin’s carbon footprint A separate analysis covering the 2020–2021 period put total electricity consumption even higher, at about 173 TWh, with over 85 megatonnes of CO₂ equivalent emissions.15Earth’s Future. The Environmental Footprint of Bitcoin Mining Across the Globe: Call for Urgent Action
The variation in these estimates comes from differences in methodology: how researchers estimate the network’s total hash rate, what energy sources miners use, and what carbon intensity they assign to electricity grids in different countries. What is not in dispute is the scale. Bitcoin mining uses more electricity than most individual countries, and the carbon footprint is substantial. Proponents argue that an increasing share of mining uses renewable energy and that the system secures trillions of dollars in value. Critics counter that no payment system should consume this much energy for a few transactions per second. The debate is legitimate, and neither side is simply wrong.
How Bitcoin Governs Itself
Bitcoin has no CEO, no board of directors, and no formal governance structure. Yet the protocol has been updated dozens of times over its history. How?
Changes are proposed through Bitcoin Improvement Proposals, or BIPs, which anyone can write. A BIP describes a technical change and the reasoning behind it. From there, the proposal has to survive a messy, decentralized process. Developers discuss it, miners signal whether they support it, and ultimately users decide by choosing which version of the software to run. Research analyzing Bitcoin’s governance has found that it functions as a kind of decentralized autonomous organization, enabling open participation and decision-making through BIPs, miner signaling, and user-activated soft forks.16arXiv. Bitcoin, a DAO?
This process is slow and sometimes contentious. The debate over SegWit took years and eventually led to a split (a “hard fork”) that created a separate cryptocurrency called Bitcoin Cash in 2017. The slowness is a feature, not a bug, from the perspective of people who view Bitcoin primarily as a monetary system. Rapid changes to the rules of money would undermine trust. But it also means that obvious improvements can take years to deploy.
Bitcoin’s Scripting Language
Most people think of Bitcoin as a simple payment system, but every Bitcoin transaction actually contains a small program written in a scripting language called Script. This language determines the conditions under which a particular batch of bitcoin can be spent. A standard transaction just says, “whoever can produce a valid signature for this public key can spend these coins.” But Script can express more complex conditions: multisignature requirements (three out of five keyholders must sign), time locks (these coins cannot be spent before a certain block height), and hash locks (produce the preimage of this hash to claim the funds).
Script is deliberately limited. It is not a general-purpose programming language like the ones used on other blockchain platforms. It cannot loop, which prevents denial-of-service attacks where a malicious program runs forever and clogs the network. But this simplicity comes with tradeoffs. Developers working with Bitcoin’s UTXO architecture often rely on manual, low-level operations that can introduce vulnerabilities like unspendable states and unconstrained execution paths.17arXiv. Bithoven: Formal Safety for Expressive Bitcoin Smart Contracts Tools like Miniscript have emerged to help developers write safer Bitcoin programs, but the ecosystem for complex on-chain contracts is far less mature than on platforms specifically designed for general-purpose smart contracts.
What a Bitcoin Wallet Actually Does
A Bitcoin wallet does not store bitcoin. It stores your private keys. The bitcoin itself is just an entry on the blockchain indicating that a certain amount is controlled by a certain address. Your wallet software reads the blockchain, finds all the entries that belong to your addresses, and shows you a balance. When you want to send a payment, the wallet constructs the transaction, signs it with the appropriate private key, and broadcasts it.
Wallets come in many forms. A hardware wallet is a small physical device that keeps your private keys offline, making them very difficult to steal remotely. A software wallet runs on your phone or computer and is more convenient but more exposed to malware. A custodial wallet, offered by exchanges, means the exchange holds your private keys on your behalf. That is similar to how a bank works: more convenient, but you are trusting the exchange not to get hacked, freeze your account, or go bankrupt.
The phrase “not your keys, not your coins” captures a real technical truth. If someone else controls the private keys, they control the bitcoin. The collapse of several major cryptocurrency exchanges over the years has made this lesson painfully concrete for millions of people who treated custodial accounts as safe storage.